Set a referrer policy

2021-06-04 21:49:53 +01:00 · 2021-06-04 21:49:53 +01:00 · 29032847d9
commit 29032847d9
parent 3b32753141
1 changed files with 1 additions and 0 deletions
--- a/config/initializers/secure_headers.rb
+++ b/config/initializers/secure_headers.rb
@ -28,6 +28,7 @@ csp_policy[:report_uri] << Settings.csp_report_url if Settings.key?(:csp_report_

 SecureHeaders::Configuration.default do |config|
  config.hsts = SecureHeaders::OPT_OUT
+  config.referrer_policy = "strict-origin-when-cross-origin"

  if Settings.csp_enforce
    config.csp = csp_policy